 |
January 09, 2014, 08:59:14 PM |
|
It is really difficult to counter a DDoS. Protection built in to the router/firewall just drops the rogue packets without replying but there is no way the router can stop all that traffic from still traversing the pipe and hitting your router/firewall.
You can either:
- Have more bandwidth than the attackers which will still allow your legitimate traffic. With amplification attacks, this is very costly!
- Have your ISP block the traffic further upstream leaving your pipe free.
- Use one of the companies that provide this service which normally means you use them as a proxy hiding your true IP.
- Setup your own proxies in hosted datacentre's and hide behind those.
That is all I can think of at the moment.
If the mining setup is in your home/office, I would just pull in another internet pipe. Preferably with a different ISP and switch to that when required. Or just use a dedicated line for the miners minimising exposure of your IP to third parties.
|
